Listing of the Claims 



1. (Currently amended) A method comprising: 

receiving at a security host a request from a remote client to access a system 
host, the request including security credentials: 

providing a network address for a-the system host to tHhe remote client if the 
security credentials for the remote client satisfy at least one condition for accessing 
the system host;-and 

verifying following an attempt by the remote client to directly access the 
system host, receiving at the security host a request from the system host to verify that 
the remote client is authorized to access the system hos t in r es pon se to a request from 
th e system host to verify the remot e client : and 

transmitting from the security host to the system host a verification, whereby 
the system host grants the remote client direct access to the system host . 

2. (Currently amended) The method of claim 1, further comprising: 
granting transmitting from the security host to the remote client a security key 

with the network address if the security credentials for the remote client satisfy the at 
least one condition for accessing the system host : and 

following an attempt by the remote client to directly access the system host, 
the attempt including a transmission of the security key, evaluating the security key 
when it is received by the security host from the system host to verify that the remote 
client is authorized to access the system host. 

3. (Original) The method of claim 1, further comprising requiring the remote 
client present the system host with a valid security key to verify that the remote client 
is authorized to access the system host. 

4. (Original) The method of claim 1, further comprising requiring the remote 
client timely present the system host with a security key to verify that the remote 
client is authorized to access the system host. 

5. (Currently amended) The method of claim 1, further comprising 
receiving at the security host the network address from the system host. 
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6. (Currently amended) A computer program product encoding a 
computer program for executing on a computer system a computer process, the 
computer process comprising: 

receiving at a security host a request from a remote client to access a system 
host, the request including security credentials: 

providing a network address for a-the system host to a-the remote client if the 
security credentials for the remote client satisfy at least one condition for accessing 
the system host;-and 

v e rifying f ollowing an attempt by the remote client to directly access the 
system host, receiving at the security host a request from the system host to verify that 
the remote client is authored to access the system host in response to a r e quest from 
the s y s tem host to verify tho -remote oliont ; and 

transmitting from the security host to the system host a verification, whereby 
the system host grants the remote client direct access to the system host. . 

7. (Currently amended) The computer program product of claim 6 
wherein the computer process further comprises: 

granting transmitting from the security host to the remote client a security key 
with the network address if the security credentials for the remote client satisfy the at 
least one condition for accessing the system host : and 

following an attempt bv the remote client to access the system host, the 
attempt including a transmission of the security kev. evaluating the security key when 
it is received bv the security host from the system host to verify that the remote client 
is authorized to access the system host. 

8. (Original) The computer program product of claim 6 wherein the 
computer process further comprises requiring the remote client present the system 
host with a valid security key to verify that the remote client is authorized to access 
the system host. 

9. (Original) The computer program product of claim 6 wherein the 
computer process further comprises requiring the remote client timely present the 
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system host with a security key to verify that the remote client is authorized to access 
the system host. 

10. (Currently amended) The computer program product of claim 6 
wherein the computer process further comprises at the security host receiving the 
network address from the system host 

11. (Currently amended) A system -security host comprising: 

an authorization module receiving a request from a remote client to access a 
system host, the authorization module providing the remote client with a network 
address of the system host if the remote client is authorized to access the system host; 

a verification module receiving a request from the system host to verify that 
the remote client is authorized to access the system host before granting the remote 
client access to the system host. 

12. (Currently amended) The system - security host of claim 11 further 
comprising a security key to be provided to the remote client if the remote client is 
authorized to access the system host. 

13. (Currently amended) The system - security host of claim 11 further 
comprising a security key to be provided to the remote client for presentation to the 
system host to verify that the remote client is authorized to access the system host. 

14. (Currently amended) The system - security host of claim 11 further 
comprising a security key to be provided to the remote client for timely presentation 
to the system host to verify that the remote client is authorized to access the system 
host. 

15. (Currently amended) The system- security host of claim 11 further 
comprising an address database having the network address of the system host. 

16. (Currently amended) The system - security host of claim 11 further 
comprising a configuration module for accessing a building automation system via the 
system host if the remote client is granted access to the system host. 
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17. (Cancelled) 



18. (Cancelled) 

19. (Currently amended) The system - security host of claim 16 wherein 
the configuration module is provided for the remote client via a security host. 

20. (Currently amended) The system - security host of claim 16 wherein 
the configuration module is provided by the security host for the remote client as a 
web application. 
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